Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3231332e3233322e38372e302f32342d3234203d3e20313336373837.roa
File: 3231332e3233322e38372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: KlDrnGe6p9ms1plLb1b/07ETP9NPj7IL56wCxSjWoxo=
Subject key identifier: 3D:3A:70:02:B4:47:D8:F2:65:52:BE:C8:28:0B:D4:90:A5:A3:4F:63
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 6AB28732FBD134B04589EBDFCB12712452539725
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231332e3233322e38372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 16 Dec 2022 09:00:02 +0000
ROA not before: Fri 16 Dec 2022 08:55:02 +0000
ROA not after: Fri 15 Dec 2023 09:00:02 +0000
asID: 136787
IP address blocks: 213.232.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b2:87:32:fb:d1:34:b0:45:89:eb:df:cb:12:71:24:52:53:97:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Dec 16 08:55:02 2022 GMT
Not After : Dec 15 09:00:02 2023 GMT
Subject: CN=3D3A7002B447D8F26552BEC8280BD490A5A34F63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:b2:87:e3:05:0c:69:43:51:d6:aa:14:fb:
48:af:60:2d:40:43:2a:de:6b:b6:9d:44:2d:bc:ab:
21:3a:ca:d7:71:52:07:c6:e6:dd:10:42:01:07:22:
c7:e4:ae:9e:47:b3:95:62:2f:19:cc:fa:79:2c:b3:
10:cf:bb:8e:a2:f0:0b:f0:5a:fc:07:e6:b7:76:d6:
99:13:27:7b:fa:c3:2b:c6:66:2f:0b:5f:b2:6f:32:
41:0c:18:c9:be:72:7e:8d:6c:0a:5c:d7:64:40:24:
bd:e0:0b:65:94:96:0f:19:97:b3:11:6f:cc:72:fb:
a2:43:b5:dd:8a:b1:9a:25:c0:95:98:d4:2e:c3:c2:
6a:8f:3a:9a:96:04:c5:e3:47:b8:f2:35:32:8e:98:
33:61:79:e5:cb:23:2f:24:95:0e:6b:f5:89:d1:39:
e1:75:2d:38:9f:0f:5c:fe:3a:98:ea:d1:6f:03:e0:
80:9c:65:b4:21:39:82:fc:c6:3f:7e:9c:09:f8:ac:
fb:92:e6:6c:26:f9:54:79:7f:3b:1f:0b:20:5c:00:
d2:94:4e:31:62:06:b4:b9:2d:01:d8:8d:cf:48:88:
e3:98:03:34:21:0b:54:ea:6c:3e:5e:9e:a2:3b:b6:
c2:51:0f:7b:6e:b7:5c:5f:8e:35:e9:ab:b0:4e:be:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3A:70:02:B4:47:D8:F2:65:52:BE:C8:28:0B:D4:90:A5:A3:4F:63
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231332e3233322e38372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.87.0/24
Signature Algorithm: sha256WithRSAEncryption
74:1c:c6:50:b5:e6:bf:d1:38:9e:b8:7b:d5:c9:3f:da:92:86:
2a:8a:59:68:49:c6:55:06:58:3b:12:3d:b7:25:71:17:b0:73:
93:71:52:5f:0c:6a:72:eb:1f:f6:2e:bd:8e:65:fe:fe:a1:a9:
cd:a6:ff:4d:ef:2f:e8:fc:f1:f1:90:ca:31:33:ab:22:a3:d6:
5b:d8:90:86:42:8d:a4:85:50:c5:45:3c:aa:4c:2a:6b:e1:b9:
5a:bd:49:5f:15:7b:6e:02:4d:4d:8d:50:0c:c2:25:cb:ff:5b:
26:37:f1:75:ff:84:78:30:b3:33:a2:23:42:ce:16:ce:c9:01:
be:5c:6d:82:69:02:39:6d:da:f7:30:8d:e6:66:ca:5e:61:b3:
a5:c7:02:56:c3:72:c6:54:a7:d3:c2:9e:47:6d:36:27:56:59:
40:ac:c2:48:11:52:66:88:36:38:28:d3:bd:e7:44:41:da:7a:
a6:1b:cf:21:f6:03:d2:f8:a5:33:92:df:34:aa:e2:62:f8:47:
0c:32:e4:81:1d:e2:e8:43:8b:b2:e0:18:9c:10:2a:16:b9:b8:
04:55:d1:5e:16:c7:4c:4e:13:f1:c3:b5:b6:20:00:45:bb:35:
b6:8c:f1:1a:91:65:c6:fc:99:7e:e0:f9:fc:f5:2a:67:19:71:
2c:97:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org